Restrict ticket updating to users with permission